After you upgrade a Microsoft Windows 2000 Server-based domain controller to Microsoft Windows Server 2003, you may experience the following symptoms:
The upgraded server does not obtain an IP address from a Dynamic Host Configuration Protocol (DHCP) server.
The following event appears in the System log in Event Viewer:
Event Type: Error Event Source: Service Control Manager Event Category: None Event ID: 7023 Date: Date Time: Time User: N/A Computer: ServerName Description: The DHCP Client service terminated with the following error: Access is denied.
When you click Start, point to Administrative Tools, and then click Services, you notice that the DHCP Client service does not start. If you try to start the DHCP Client service, you receive the following error message:
Could not start the DCHP Client service on Local Computer. Error 5: Access is denied.
This problem occurs because the Network Service account does not have sufficient permissions to access the following registry subkeys when you upgrade to Windows Server 2003:
This problem may also occur when you modify the Windows 2000 Group Policy security settings, and the following conditions are true:
You modify the security settings by applying the domain controller default security template (DC Security.inf) to the Windows 2000 Server-based domain controller.
You apply the template before you upgrade the domain controller to Windows Server 2003.
Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:
322756 How to back up and restore the registry in Windows
To resolve this problem, assign the Network Service account Full Control access to the following registry subkeys: